Study. uk . com
  1. Home
  2. All questions
  3. Question 65

CompTIA Security+ study material · question 65 of 611

A researcher finds a flaw in a company's product and cannot locate any way to report it. Which control would have prevented this situation?

  1. A stricter acceptable use policy
  2. A non-disclosure agreement for researchers
  3. A bug bounty payout schedule
  4. A published vulnerability disclosure policy with a reporting channel
Show the answer

Answer: D. A published vulnerability disclosure policy with a reporting channel

A disclosure policy tells researchers where to report and what is in scope, turning a discovery into a managed report.

Source: OWASP Vulnerability Disclosure Cheat Sheet (OWASP) — OWASP Vulnerability Disclosure Cheat Sheet › Introduction

Challenge yourself on this topic → Study as cards